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What is claimed is: 

1 . A process for pre-controUing the execution of a program contained in 
a second chip card, imserted in a terminal, in addition to a first chip card, containing 
data and connected tol a telecommunication network to which the terminal is linked, 
comprising the step of authenticating one of the first and second cards by the other. 



prior to the execution 



3f the program. 



2. The prdcess in accordance with Claim 1, wherein the authentication 
involves an authenticai ion of the second card by the first card, and comprises the 
following steps: 

- applying an idfentifier of the program which is transmitted from the second 
card to the first card anq a key to an algorithm, contained in the first card, to produce 
a result, and 

- comparing the ilesult and a certificate which is transmitted by the second 
card to the first card in oper to execute the program only in case the latter two are 
equal. 



3. The process in accordance with Claim 2, further including the step of 
selecting the key in a tab[e of keys contained in the first card as a function of the 
program identifier. 



4. The process in accordance with Claim 1, wherein the authentication 
involves an authenticatioij of the second card by the first card, and comprises the 
following steps: 

- transmitting a ranliom number from the first card to the second card; 

- applying the transmitted random number and a key to an algorithm 
contained in the second car^ to produce a signature that is transmitted to the first 
card; 
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■ ^Rplying the random number and a key to an algorithm contained in the 
first card to produce a resuh; and 

- conrparing the result to the signature transmitted to the first card so as to 
execute the program only when the two are equal. 

5. Tne process in accordance with Claim 4, further including the step of 
selecting the key From a table of keys contained in the first card as a function of a 
program identifientransmitted from the second card to the first card. 

6. The process in accordance with Claim 1, wherein the authentication 
involves an authentication of the first card by the second card, and comprises the 
following steps: \ 

- transmitting W predetermined field of a number from the first card to the 
second card; and \ 

- comparing the predetermined field to a number in the second card so as to 
execute the program or\to read its content only when the two are equal. 

7. The process in accordance with Claim 6, wherein the predetermined 
field comprises at least the call sign of the telecommunication network contained in 
an identity number of the first card, 

8. The process in accordance with Claim 1, wherein the authentication 
involves an authentication oflthe first card by the second card, and comprises the 
following steps: \ 

- reading a random number from the first card into the second card; 

- applying the random number and a key to an algorithm contained in the 
first card so as to produce a signature transmitted to the second card; 

- applying the random mmiber and a key to an algorithm contained in the 
second card so as to produce a result; and 
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conVparing the result to the signature transmitted to the second card so as to 
execute the piogram or read its content only when the two are equal. 

9. The process in accordance with Claim 8, further including the step of 
selecting the kejA in a table of keys contained in a first card as a function of a 
program identifiqr transmitted by the second card to the first card. 

10. The process in accordance with Claim 1, comprising a first 
authentication of one card by the other card and a second authentication of the other 
card by said one card which follows the first authentication when said one card is 
authenticated by the other card and which is followed by the execution of the 
program when the other card is authenticated by said one card. 

1 1 . The process in accordance with Claim 1 , wherein at least one part of 
the authentication is executed only in response to an authentication request, 
transmitted from the second card to the first card, 

12. The propess in accordance with Claim 1, wherein authentication steps 
are executed in a serve^ of the telecommunication network in response to a request 
from the first card. 

13. The process according to Claim 1, further including the steps of 
reading of the characteinstics for the execution of the program in the second card, by 
the first card or the terminal in response to an introduction of the second card in a 
reading means linked to jthe terminal, and analysis of the characteristics in 
comparison to the materilal and software capacities of the first card and/or the 
terminal to reject the second card when said characteristics are incompatible with the 
first card and/or the terminal. 
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14. The process in accordance with Claim 1, fiirther including the step, 
between the authentication of card and the execution of the program, of remotely 
loading the program from the second card into the first card for a program execution 
in the first card. \ 

15. The process in accordance with Claim 1 , wherein the program is 
launched on command fiom the first card to be executed in the second card and 
exchanges of commands pnd responses are made between the second card and the 
terminal. 

16. The process ot* claim 15 wherein said exchanges are made directly 
between the second card amd the terminal. 

17. The process of claim 15 wherein said excheinges between the second 
card and the terminal are made through the first card. 

1 8. The process in accordance with Claim 1, further including the step, 
between the authentication on card and the execution of program, of remotely 
loading the program from thepecond card into the terminal for program execution in 
the terminal. 



19. The process in apcordance with Claim 1, wherein the 
telecommunication network is a radio telephone network, the terminal is a mobile 
radio telephone terminal, and the first card is a subscriber identity card. 



